위협 인텔리전스 (1,991건)
실제 악용·공격 신호가 있는 취약점 — CISA KEV · Qualys RTI · 공개 PoC/익스플로잇 · 악용확률(EPSS) 높은 건 통합. Qualys 마지막 동기화 6시간 전.
CISA KEV
1,685
실제 공격 중
985
랜섬웨어
352
익스플로잇 공개
1,320
악용확률 50%↑
877
제로데이
13
| 긴급도 | CVE | 심각도 | 악용확률 | 신호 | 제품 · 악성코드 |
|---|---|---|---|---|---|
| 100 | CVE-2026-73570 | 8.9 T8.0 | 97.4% | KEVPoC EPSS 97%원격 | Synacor Zimbra Collaboration Suite (ZCS) |
| 100 | CVE-2019-5591 | — T6.0 | 97.1% | KEV랜섬실공격PoC기능적 EPSS 97% | Fortinet FortiOS 🦠 Unattributed (Ransomware) |
| 100 | CVE-2026-64849 | 9.3 T8.4 | 96.8% | KEVPoC EPSS 97% | MLflow MLflow |
| 100 | CVE-2019-7193 | 9.8 T9.1 | 96.4% | KEV랜섬실공격익스공개기능적 EPSS 96%원격 | QNAP QTS 🦠 eCh0raix (Ransomware); QNAPCrypt (Ransomware); Unattributed (Ransomware) |
| 100 | CVE-2025-42999 | 9.1 T8.4 | 96.3% | KEV랜섬실공격익스공개기능적 EPSS 96%원격 | SAP NetWeaver 🦠 Unattributed (Ransomware); RansomEXX (Ransomware) |
| 100 | CVE-2025-29824 | 7.8 T8.2 | 96.3% | KEV랜섬실공격PoC기능적 EPSS 96% | Microsoft Windows 🦠 Generic (Trojan); CVE-2025-29824 (Exploit); Unattributed (Ransomware); RansomEXX (Ransomware); Play (Ransomwa… |
| 100 | CVE-2021-27876 | 8.1 T9.1 | 96.2% | KEV랜섬실공격PoC기능적 EPSS 96% | Veritas Backup Exec Agent 🦠 Blackcat (Ransomware); AvosLocker (Ransomware); Akira (Ransomware); Unattributed (Ransomware) |
| 100 | CVE-2026-15410 | 7.2 T9.3 | 95.8% | KEV랜섬실공격PoC기능적 EPSS 96%원격 | SonicWall SMA1000 Appliances 🦠 Ransomware Inc (Ransomware); Unattributed (Ransomware) |
| 100 | CVE-2017-1000253 | 7.8 T7.2 | 95.6% | KEV랜섬실공격PoC기능적 EPSS 96% | Linux Kernel 🦠 CVE-2017-1000253 (Exploit); DarkRadiation (Ransomware); Unattributed (Ransomware) |
| 100 | CVE-2022-0995 | 7.8 T8.2 | 95.2% | KEV실공격PoC기능적 EPSS 95% | Linux Kernel 🦠 Multiverze (Trojan); CVE-2022-0847 (Exploit); CVE-2021-4034 (Exploit); CVE-2022-25636 (Exploit); CVE-2022-099… |
| 100 | CVE-2015-3246 | 5.1 T4.7 | 94.9% | KEV실공격PoC기능적 EPSS 95% | Red Hat Libuser 🦠 CVE-2015-3246 (Exploit); CVE-2017-7308 (Exploit); Multiverze (Trojan) |
| 100 | CVE-2024-57728 | 7.2 T9.2 | 93.8% | KEV랜섬실공격익스공개기능적 EPSS 94%원격 | SimpleHelp SimpleHelp 🦠 MedusaLocker (Ransomware); DragonForce (Ransomware); Unattributed (Ransomware); Play (Ransomware); RansomHub … |
| 100 | CVE-2025-24472 | 8.1 T9.1 | 93.7% | KEV랜섬실공격PoC기능적 EPSS 94%원격 | Fortinet FortiOS and FortiProxy 🦠 SuperBlack (Ransomware); Unattributed (Ransomware); Hunters International (Ransomware); RansomHub (Ransomware… |
| 100 | CVE-2026-33825 | 7.8 T7.2 | 93.6% | KEV랜섬실공격PoC기능적 EPSS 94% | Microsoft Defender 🦠 CVE-2026-33825 (Exploit); Heuristic (Malware); Unattributed (Ransomware) |
| 100 | CVE-2026-68820 | 7.0 T9.1 | 93.1% | KEV실공격PoC기능적 EPSS 93% | Microsoft Windows Ancillary Function Driver for WinSock |
| 100 | CVE-2021-27101 | 9.8 T9.1 | 92.8% | KEV랜섬실공격익스공개기능적 EPSS 93%원격 | Accellion FTA 🦠 CryptoMix (Ransomware); Clop (Ransomware); Conti (Ransomware); Unattributed (Ransomware) |
| 100 | CVE-2022-0492 | 7.8 T9.1 | 92.3% | KEV실공격PoC기능적 EPSS 92%원격 | Linux Kernel 🦠 Multiverze (Trojan); CVE-2022-0847 (Exploit); CVE-2021-4034 (Exploit); CVE-2022-2639 (Exploit); Dirtypipe (Ex… |
| 100 | CVE-2020-29574 | 9.8 T9.1 | 91.2% | KEV랜섬실공격익스공개기능적 EPSS 91%원격 | Sophos CyberoamOS 🦠 Unattributed (Ransomware) |
| 100 | CVE-2025-60710 | 7.8 T9.1 | 91.0% | KEV랜섬실공격익스공개기능적 EPSS 91% | Microsoft Windows 🦠 Unattributed (Ransomware) |
| 100 | CVE-2026-8452 | 9.8 T8.8 | 73.7% | KEVPoC EPSS 74%원격 | Citrix NetScaler ADC and NetScaler Gateway |
| 100 | CVE-2026-53362 | 7.8 T9.1 | 41.3% | KEV실공격PoC기능적 | Linux Kernel 🦠 DirtyFrag (Exploit); CVE-2026-43284 (Exploit); DirtyFrag (Trojan) |
| 99 | CVE-2026-8037 | — T8.8 | 99.9% | KEVPoC EPSS 100%원격 | Progress LoadMaster |
| 99 | CVE-2026-63077 | — T8.8 | 99.8% | KEVPoC EPSS 100%원격 | JetBrains TeamCity |
| 99 | CVE-2026-72898 | — T9.0 | 99.6% | KEVPoC EPSS 100%원격 | Metabase Metabase |
| 99 | CVE-2026-18577 | — T7.3 | 99.0% | KEVPoC EPSS 99%원격 | N-able N-central |
| 99 | CVE-2025-22225 | — T7.6 | 59.7% | KEV랜섬실공격익스공개기능적 EPSS 60%원격 | VMware ESXi 🦠 Akira (Ransomware); Helldown (Ransomware); Play (Ransomware); Unattributed (Ransomware) |
| 98 | CVE-2023-21529 | 8.8 | 99.2% | KEV랜섬 EPSS 99% | Microsoft Exchange Server |
| 98 | CVE-2024-38094 | 7.2 | 98.9% | KEV랜섬 EPSS 99% | Microsoft SharePoint |
| 97 | CVE-2024-7399 | 8.8 T8.8 | 99.8% | KEV익스공개 EPSS 100%원격 | Samsung MagicINFO 9 Server |
| 97 | CVE-2025-62593 | 8.8 T7.9 | 96.9% | KEVPoC EPSS 97%원격 | Ray-Project Ray |
| 97 | CVE-2025-0111 | — T9.4 | 78.6% | KEV실공격익스공개광범위 EPSS 79%원격 | Palo Alto Networks PAN-OS 🦠 CVE-2024-9474 (Exploit); RA World (Ransomware); Unattributed (Ransomware) |
| 95 | CVE-2021-43226 | — T9.1 | 86.7% | KEV랜섬실공격PoC기능적 EPSS 87% | Microsoft Windows 🦠 LockBit (Ransomware); MedusaLocker (Ransomware); Unattributed (Ransomware) |
| 94 | CVE-2021-44515 | — T9.1 | 100.0% | KEV익스공개기능적 EPSS 100%원격 | Zoho Desktop Central |
| 94 | CVE-2017-5521 | — T7.5 | 99.8% | KEVPoC기능적 EPSS 100%원격 | NETGEAR Multiple Devices |
| 94 | CVE-2023-46748 | — T9.1 | 90.8% | KEV실공격익스공개기능적 EPSS 91%원격 | F5 BIG-IP Configuration Utility 🦠 RansomHub (Ransomware); Unattributed (Ransomware) |
| 94 | CVE-2018-8611 | — T9.1 | 90.3% | KEV실공격PoC기능적 EPSS 90%원격 | Microsoft Windows 🦠 AutoKMS (Hacktool); Johnnie (Trojan); Swrort (Trojan); CVE-2018-8639 (Exploit); CVE-2018-8453 (Exploit); Unat… |
| 94 | CVE-2023-36851 | — T9.1 | 62.6% | KEV실공격익스공개기능적 EPSS 63%원격 | Juniper Junos OS 🦠 Black Basta (Ransomware) |
| 94 | CVE-2024-50302 | — T9.1 | 53.9% | KEV실공격익스공개기능적 EPSS 54%원격 | Linux Kernel |
| 93 | CVE-2026-34486 | 7.5 T8.8 | 99.9% | KEVPoC EPSS 100% | Apache Tomcat |
| 93 | CVE-2024-8190 | 7.2 T8.2 | 99.8% | KEVPoC EPSS 100% | Ivanti Cloud Services Appliance |
| 93 | CVE-2024-9380 | 7.2 | 99.2% | KEV EPSS 99% | Ivanti Cloud Services Appliance (CSA) |
| 91 | CVE-2026-20349 | 8.6 T8.2 | 81.2% | KEV익스공개광범위 EPSS 81% | Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) |
| 90 | CVE-2019-0708 | — | 100.0% | KEV랜섬PoC EPSS 100% | Microsoft Remote Desktop Services |
| 90 | CVE-2023-38035 | — | 100.0% | KEV랜섬PoC EPSS 100% | Ivanti Sentry |
| 90 | CVE-2021-26085 | — | 100.0% | KEV랜섬PoC EPSS 100% | Atlassian Confluence Server |
| 90 | CVE-2017-0199 | — | 100.0% | KEV랜섬PoC EPSS 100% | Microsoft Office and WordPad |
| 90 | CVE-2019-0604 | — | 100.0% | KEV랜섬PoC EPSS 100% | Microsoft SharePoint |
| 90 | CVE-2021-20038 | — | 100.0% | KEV랜섬PoC EPSS 100% | SonicWall SMA 100 Appliances |
| 90 | CVE-2019-7481 | — | 100.0% | KEV랜섬 EPSS 100% | SonicWall SMA100 |
| 90 | CVE-2021-34527 | — | 100.0% | KEV랜섬PoC EPSS 100% | Microsoft Windows |